{"tool":"network-report","status":"warn","input":{"query":"AS17564"},"findings":[{"level":"warn","text":"AS17564 (GITN-PCN-AS-AP) announces 11 IPv4 and 6 IPv6 prefixes.","title":"AS17564 (GITN-PCN-AS-AP) announces 11 IPv4 and 6 IPv6 prefixes.","params":{"query":"AS17564","who":"AS17564 (GITN-PCN-AS-AP)","v4":11,"v6":6}},{"level":"warn","text":"10 of 17 announced prefixes have no ROA (RPKI not found): 103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5).","title":"10 of 17 announced prefixes have no ROA (RPKI not found): 103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5).","params":{"count":10,"total":17,"list":"103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5)","asn":17564},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS17564 and a max length equal to the prefix length:","record":"103.8.144.0/23 AS17564 max-length /23\n103.8.144.0/24 AS17564 max-length /24\n103.8.145.0/24 AS17564 max-length /24\n103.8.147.0/24 AS17564 max-length /24\n103.8.160.0/22 AS17564 max-length /22\n150.242.180.0/23 AS17564 max-length /23\n150.242.182.0/23 AS17564 max-length /23\n163.53.152.0/23 AS17564 max-length /23\n163.53.154.0/24 AS17564 max-length /24\n202.75.4.0/22 AS17564 max-length /22"},{"level":"warn","text":"6 of 17 announced prefixes have no IRR route object: 2401:b00:800::/37, 2401:b00:11::/48, 2400:e800:1000::/36, 103.8.160.0/22, 2401:b00::/37 (+1).","title":"6 of 17 announced prefixes have no IRR route object: 2401:b00:800::/37, 2401:b00:11::/48, 2400:e800:1000::/36, 103.8.160.0/22, 2401:b00::/37 (+1).","params":{"count":6,"total":17,"list":"2401:b00:800::/37, 2401:b00:11::/48, 2400:e800:1000::/36, 103.8.160.0/22, 2401:b00::/37 (+1)","asn":17564},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS17564 in your RIR’s IRR database (or RADB).","record":"route6: 2401:b00:800::/37\norigin: AS17564\n\nroute6: 2401:b00:11::/48\norigin: AS17564\n\nroute6: 2400:e800:1000::/36\norigin: AS17564"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS17564","kind":"asn","special":null,"allocation":{"rir":"apnic","registry":"APNIC","cc":"MY","country":"Malaysia","date":"2006-01-04","status":"allocated","range":"AS17564","opaque_id":"A917DCDA","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS17564","who":"AS17564 (GITN-PCN-AS-AP)","v4":11,"v6":6}},"seconds":1.3999999999999999,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":17564,"v4":11,"v6":6}},{"tool":["rpki",{"prefix":"103.8.144.0/23","asn":"17564"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":17,"list":"103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5)","asn":17564},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"103.8.144.0/23 AS17564 max-length /23\n103.8.144.0/24 AS17564 max-length /24\n103.8.145.0/24 AS17564 max-length /24\n103.8.147.0/24 AS17564 max-length /24\n103.8.160.0/22 AS17564 max-length /22\n150.242.180.0/23 AS17564 max-length /23\n150.242.182.0/23 AS17564 max-length /23\n163.53.152.0/23 AS17564 max-length /23\n163.53.154.0/24 AS17564 max-length /24\n202.75.4.0/22 AS17564 max-length /22"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":7,"asn":17564,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":6,"total":17,"list":"2401:b00:800::/37, 2401:b00:11::/48, 2400:e800:1000::/36, 103.8.160.0/22, 2401:b00::/37 (+1)","asn":17564},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2401:b00:800::/37\norigin: AS17564\n\nroute6: 2401:b00:11::/48\norigin: AS17564\n\nroute6: 2400:e800:1000::/36\norigin: AS17564"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":17564,"holder":"GITN-PCN-AS-AP - GITN (M) Sdn. Bhd.","announced":true,"v4":11,"v6":6,"prefixes":["103.8.144.0/23","103.8.144.0/24","103.8.145.0/24","103.8.147.0/24","103.8.160.0/22","150.242.180.0/23","150.242.182.0/23","163.53.152.0/23","163.53.154.0/24","202.75.4.0/22","203.217.176.0/22","2400:e800:1000::/36","2401:b00:11::/48","2401:b00:800::/37","2401:b00::/36","2401:b00::/37","2401:b00:f000::/36"],"rpki":{"not-found":10,"unchecked":7,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"103.8.144.0/23","state":"not-found"},{"prefix":"103.8.144.0/24","state":"not-found"},{"prefix":"103.8.145.0/24","state":"not-found"},{"prefix":"103.8.147.0/24","state":"not-found"},{"prefix":"103.8.160.0/22","state":"not-found"},{"prefix":"150.242.180.0/23","state":"not-found"},{"prefix":"150.242.182.0/23","state":"not-found"},{"prefix":"163.53.152.0/23","state":"not-found"},{"prefix":"163.53.154.0/24","state":"not-found"},{"prefix":"202.75.4.0/22","state":"not-found"}],"irr_missing":["2401:b00:800::/37","2401:b00:11::/48","2400:e800:1000::/36","103.8.160.0/22","2401:b00::/37","2401:b00::/36"],"irr_missing_count":6,"bogons":[],"upstreams":[{"asn":9930,"power":503,"name":"TIME DotCom Berhad"},{"asn":4788,"power":470,"name":"Telekom Malaysia Berhad (TM)"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS17564"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":17,"list":"103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5)","asn":17564}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}],"data":{"query":"AS17564","looked_up":"AS17564","kind":"autnum","source":"https://rdap.apnic.net/autnum/17564","terms":"https://www.apnic.net/about-apnic/whois_search/about/termsofuse/","summary":{"Name":"GITN-PCN-AS-AP","Handle":"AS17564","Range":"AS17564","Country":"MY","Status":"active","Registered":"2008-09-04T06:40:39Z","Last changed":"2021-01-12T22:45:31Z","Abuse contact":"gitn.pcn@tm.com.my"},"entities":[{"roles":["registrant"],"kind":"org","name":"GITN Sdn. Bhd.","email":"gitn.pcn@tm.com.my"},{"roles":["technical"],"kind":"individual","name":"Mohd Ridhauddin Amin","email":"ridhauddin@gitn.com.my"},{"roles":["abuse"],"kind":"group","name":"IRT-GITN-PCN-MY","email":"gitn.pcn@tm.com.my"},{"roles":["technical"],"kind":"individual","name":"Efdza Nizam Hamzah","email":"efdza@maxipacific.com"},{"roles":["administrative"],"kind":"individual","name":"Sapuan Somo","email":"sapuan@gitn.com.my"}],"allocation":{"rir":"apnic","registry":"APNIC","cc":"MY","country":"Malaysia","date":"2006-01-04","status":"allocated","range":"AS17564","opaque_id":"A917DCDA","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS17564"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":17564,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"17564"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"tool":["rpki",{"prefix":"103.8.144.0/23","asn":"17564"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":17,"list":"103.8.144.0/23, 103.8.144.0/24, 103.8.145.0/24, 103.8.147.0/24, 103.8.160.0/22 (+5)","asn":17564},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"103.8.144.0/23 AS17564 max-length /23\n103.8.144.0/24 AS17564 max-length /24\n103.8.145.0/24 AS17564 max-length /24\n103.8.147.0/24 AS17564 max-length /24\n103.8.160.0/22 AS17564 max-length /22\n150.242.180.0/23 AS17564 max-length /23\n150.242.182.0/23 AS17564 max-length /23\n163.53.152.0/23 AS17564 max-length /23\n163.53.154.0/24 AS17564 max-length /24\n202.75.4.0/22 AS17564 max-length /22","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":6,"total":17,"list":"2401:b00:800::/37, 2401:b00:11::/48, 2400:e800:1000::/36, 103.8.160.0/22, 2401:b00::/37 (+1)","asn":17564},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2401:b00:800::/37\norigin: AS17564\n\nroute6: 2401:b00:11::/48\norigin: AS17564\n\nroute6: 2400:e800:1000::/36\norigin: AS17564","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS17564"}